Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Jun 10, 2025
Malware in react-intlist
1 compromised version
- Jun 10, 2025
Malicious code in yux-utils (npm)
1 compromised version
- Jun 10, 2025
Malicious code in vyre-utils (npm)
1 compromised version
- Jun 10, 2025
Malicious code in fyre-utils (npm)
2 compromised versions
- Jun 10, 2025
Malware in vyre-utils
1 compromised version
- Jun 10, 2025
Malware in yux-utils
1 compromised version
- Jun 10, 2025
Malware in fyre-utils
1 compromised version
- Jun 10, 2025
Malicious code in transaction-data-generation (npm)
- Jun 10, 2025
Malware in transaction-data-generation
1 compromised version
- Jun 10, 2025
Malicious code in jsons-pack (npm)
- Jun 10, 2025
Malware in jsons-pack
1 compromised version
- Jun 10, 2025
Malicious code in express-jscookie (npm)
1 compromised version
- Jun 10, 2025
Malware in express-jscookie
1 compromised version
- Jun 10, 2025
Malicious code in gwnodejssectest1 (npm)
2 compromised versions
- Jun 10, 2025
Malware in gwnodejssectest1
1 compromised version
- Jun 10, 2025
Malware in eu.netherlands3d.address-search
1 compromised version
- Jun 10, 2025
Malicious code in zlib1g-dev (npm)
1 compromised version
- Jun 10, 2025
Malware in zlib1g-dev
1 compromised version
- Jun 10, 2025
Malicious code in winfsp (npm)
1 compromised version
- Jun 10, 2025
Malware in winfsp
1 compromised version
- Jun 10, 2025
Malicious code in whatwg-node (npm)
1 compromised version
- Jun 10, 2025
Malware in whatwg-node
1 compromised version
- Jun 10, 2025
Malicious code in waterline-mongo-native (npm)
1 compromised version
- Jun 10, 2025
Malware in waterline-mongo-native
1 compromised version
- Jun 10, 2025
Malicious code in uvicorn (npm)
1 compromised version
- Jun 10, 2025
Malware in uvicorn
1 compromised version
- Jun 10, 2025
Malicious code in undetected-chromedriver (npm)
1 compromised version
- Jun 10, 2025
Malware in undetected-chromedriver
1 compromised version
- Jun 10, 2025
Malicious code in typeface-myriad-pro (npm)
1 compromised version
- Jun 10, 2025
Malware in typeface-myriad-pro
1 compromised version
- Jun 10, 2025
Malicious code in throttling-proxy (npm)
1 compromised version
- Jun 10, 2025
Malware in throttling-proxy
1 compromised version
- Jun 10, 2025
Malicious code in tedious-types (npm)
1 compromised version
- Jun 10, 2025
Malware in tedious-types
1 compromised version
- Jun 10, 2025
Malicious code in svelte-local-storage (npm)
1 compromised version
- Jun 10, 2025
Malware in svelte-local-storage
1 compromised version
- Jun 10, 2025
Malicious code in statsmodels (npm)
1 compromised version
- Jun 10, 2025
Malware in statsmodels
1 compromised version
- Jun 10, 2025
Malicious code in spring-security-test (npm)
1 compromised version
- Jun 10, 2025
Malware in spring-security-test
1 compromised version
- Jun 10, 2025
Malicious code in scrapy-user-agents (npm)
1 compromised version
- Jun 10, 2025
Malware in scrapy-user-agents
1 compromised version
- Jun 10, 2025
Malicious code in scikeras (npm)
1 compromised version
- Jun 10, 2025
Malware in scikeras
1 compromised version
- Jun 10, 2025
Malicious code in sails-mongo-ng (npm)
1 compromised version
- Jun 10, 2025
Malware in sails-mongo-ng
1 compromised version
- Jun 10, 2025
Malicious code in rlang (npm)
1 compromised version
- Jun 10, 2025
Malware in rlang
1 compromised version
- Jun 10, 2025
Malicious code in react-query-persist (npm)
1 compromised version
- Jun 10, 2025
Malware in react-query-persist
1 compromised version
Page 5851 of 6,634